Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ayzagen/secure-cookie
Cookie library/middleware with signing and encryption support for Node.js
https://github.com/ayzagen/secure-cookie
aes-encryption cookie encrypted-cookies express koa nodejs signed-cookies
Last synced: about 2 months ago
JSON representation
Cookie library/middleware with signing and encryption support for Node.js
- Host: GitHub
- URL: https://github.com/ayzagen/secure-cookie
- Owner: ayZagen
- License: mit
- Created: 2021-09-20T09:56:43.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2023-02-20T03:06:24.000Z (almost 2 years ago)
- Last Synced: 2024-04-26T07:01:21.473Z (8 months ago)
- Topics: aes-encryption, cookie, encrypted-cookies, express, koa, nodejs, signed-cookies
- Language: TypeScript
- Homepage:
- Size: 701 KB
- Stars: 5
- Watchers: 2
- Forks: 0
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
secure-cookie
==============
[![NPM Version][npm-badge]][npm-url]
[![Build Status][ci-badge]][ci-url]
[![Test Coverage][codecov-badge]][codecov-url]
[![Licencse][license-badge]][license-url]
Nodejs cookie library with signing and encryption support. For those familiar with
[`cookies`](https://github.com/pillarjs/cookies)
this library is almost the same plus encryption and additional configuration support.
## Installation
This library is published in the NPM registry and can be installed using any compatible package manager.
```sh
npm install secure-cookie --save
# For Yarn, use the command below.
yarn add secure-cookie
```
## Documentation
### Signed Cookies
```javascript
const {Cookies, KeyStore} = require('secure-cookie')
const app = express()
app.use(Cookies.express({
signed: true,
keyStore: new KeyStore({
signing: {
// encoding: 'base64',
// algorithm: 'sha1',
keys: ["mysigningkey"]
}
})
}))
//In a route handler
app.get('/some-route', function (req, res, next) {
//This will create a cookie named MC with given value.
// Because of signing is enabled, a new cookie with MC.sig will also be created
// and would contain signature of the cookie.
req.cookies.set('MC', "someValue")
})
```
### Encrypted Cookies
```javascript
const {Cookies, KeyStore} = require('secure-cookie')
const app = express()
app.use(Cookies.express({
signed: true,
keyStore: new KeyStore({
encryption: {
// algorithm: 'aes-192-ccm',
// authTagLength: 16,
// encoding: 'hex',
keys: ["a24bytesecretmustchanged"]
}
})
}))
app.get('/set-cookie', function (req, res, next) {
//This will create a cookie named MC with and with its encrtypted value.
req.cookies.set('MC', "someValue")
})
app.get('/get-cookie', function (req, res, next) {
// get decrypted value without hassle
const myCookie = req.cookies.get('MC')
assert.equal(myCookie, "someValue")
})
```
Make sure selected algorithm is supported by your NodeJs version.
By default `aes-192-ccm` is selected. You can override that and related settings from KeyStore constructor options.
If the algorithm you would like to use is missing from the default ones you can add it by following:
```javascript
const {KeyStore} = require('secure-cookie')
KeyStore.cipherInfo['aes-xxx-xxx'] = { ivLength: 16, keyLength: 16 }
```
You can see included algorithms from [src/ciphers.ts](/src/ciphers.ts)
For all options and internals have a look at to [API documentation](./docs/README.md).
## License
Released under [MIT License](./LICENSE).
[npm-badge]: https://img.shields.io/npm/v/secure-cookie.svg
[npm-url]: https://www.npmjs.com/package/secure-cookie
[codecov-badge]: https://img.shields.io/codecov/c/gh/ayZagen/secure-cookie?logo=codecov
[codecov-url]: https://codecov.io/gh/ayZagen/secure-cookie
[ci-badge]: https://github.com/ayZagen/secure-cookie/workflows/ci/badge.svg
[ci-url]: https://github.com/ayZagen/secure-cookie/actions?query=workflow%3Aci
[license-badge]: https://badgen.net/github/license/ayZagen/secure-cookie
[license-url]: ./LICENSE